Set DirectoryIndex and unset CSP for /stats
If a user creates a .htaccess in the web root with a Content Security Policy, the stats interface won't work anymore. Best thing to do is unset the CSP in /stats/.htaccess. Same thing for DirectoryIndex, for example if a user sets "DirectoryIndex home.php", you can't use the stats interface anymore.